Privacy Policy

1. Who we are

Zaro Technologies Limited ("ZaroPay") is the data controller for your personal data. We follow the Nigeria Data Protection Act 2023 and the NDPC General Application and Implementation Directive. Contact our Data Protection Officer at info@zaropay.ng.

2. What we collect

Account: phone number, name, username, profile photo, "about" text and optional recovery email.

Messages and calls: the messages, photos, voice notes and files you send, and call records (who called whom, when, how long, voice or video).

Contacts: if you allow it, we read your phone book to show which contacts use ZaroPay. We do not store your phone book. We only keep a scrambled code (hash) of each number, used to tell you when a contact joins.

Device and usage: a notification token, your online status and last seen, and basic technical logs.

Payments (when available): identity details such as BVN or NIN and transaction records, processed with our licensed partners.

3. How we use it

To run ZaroPay: create your account, deliver messages and calls, send notifications, show who is online, find your contacts on ZaroPay, keep the service secure, prevent fraud and abuse, handle reports, follow the law, and improve the app. We do not sell your personal data, and we do not use your private messages for advertising.

4. Legal bases

We process your data to provide the service you asked for (contract), with your consent (for example contacts access and notifications, which you can withdraw in your phone settings), to meet legal obligations, and for our legitimate interests in keeping ZaroPay safe.

5. Who we share it with

Only with service providers who help us run ZaroPay, under contract: Supabase (database, storage and login), Stream (voice and video calls), Google Firebase (notifications), Twilio (login codes by SMS), and our licensed payment partners. Some of these providers store data outside Nigeria. When data leaves Nigeria, we use safeguards allowed under the Nigeria Data Protection Act. We may also share data when the law or a court requires it.

6. Your privacy choices

In the app you can choose who sees your last seen, online status and profile photo, and who can call you (Me → Privacy). You can block and report people, mute chats, and turn notifications on or off.

7. How long we keep it

We keep your data while your account is active. If you delete your account, we delete your profile, messages, call history and contact codes, except what we must keep by law (for example payment records), which we keep only as long as required.

8. Your rights

You can ask to access, correct, delete or get a copy of your data, object to or restrict some processing, and withdraw consent. You can delete your account at any time in the app (Me → Delete account). To use your rights, email info@zaropay.ng. You can also complain to the Nigeria Data Protection Commission (NDPC).

9. Security

We use encryption in transit, access controls and other measures to protect your data. No system is 100% secure, so please also protect your phone and use the app lock.

10. Children

ZaroPay is not for anyone under 18. If you believe a child has created an account, contact us and we will delete it.

11. Changes

We will tell you in the app before important changes to this policy apply.

12. Contact

Zaro Technologies Limited, [Registered address in Nigeria]. Email: info@zaropay.ng